Logo HELPRO HELPRO ← Back to home

Privacy Policy

Last updated: October 2026

1. Data controller

2. What data do we process?

When you fill in an HELPRO quote request form, we process the following data: name, phone number and email address (depending on the form), as well as the service you have shown interest in. If you request information about the Web Test 360° service (website monitoring), we also process your full name, your company name, your website address and your email address, the options you tick regarding your interests and concerns, who currently manages your website and the type of monitoring you are looking for and, only if you choose to provide them, your website platform and the text of your comments. If you fill in an HELPAR form (help request or contact), we process your name, email address and phone number, the area of interest, your preferred contact channel and the text in which you describe what you need. If you use the HELPRO or HELPAR quote panels, we process your name, a contact detail (phone number or email address), the interest option you chose, your location and, in the HELPRO panel, your company name. If you subscribe to the newsletter, we process only your email address. No special categories of data (health, ideology, etc.) are collected; please do not include them in free-text fields.

AI chat assistant. If you use the website's chat assistant ("Help"), we process the messages you write in it. We recommend that you do not type personal details in the chat: to request a quote or get in touch, use the relevant button in the chat itself or the form. Before your message is sent to the assistant, the website automatically detects email addresses and phone numbers typed in free text and replaces them with a neutral placeholder; this filter is automatic and may not catch every case.

3. For what purpose do we process your data?

We use your data to respond to your request for information, help or a quote and, where applicable, to manage any business relationship that may arise from it. If you have voluntarily subscribed to the newsletter, we also use your email address to send you news, tips and commercial communications about HELPRO. Your data is not used for any other purposes and no automated profiling is carried out.

Chat messages are used to generate guidance on HELPRO and HELPAR services. The assistant's replies are generated automatically using artificial intelligence, are for guidance only and may contain errors; if you prefer, you can contact a member of the team directly. Use of the assistant is voluntary.

4. What is the legal basis for processing?

The legal basis for processing your data is your consent, given by ticking the relevant box or by voluntarily submitting the form with your data. In the case of the newsletter, consent is given independently and specifically by ticking the box on the subscription form (Art. 6.1.a GDPR and Art. 21 of the LSSI-CE), and you may withdraw it at any time, free of charge and easily, using the unsubscribe link included in each communication or by writing to info@helpro.es.

5. How long do we keep your data?

Data will be kept for as long as there is a mutual interest in maintaining contact and, once the relationship has ended, for the legally required periods. Newsletter data will be kept until you request to be removed from the subscription list.

The history of your conversation with the assistant is kept in your browser during the session (sessionStorage) to maintain the conversation and is deleted when you close the tab. The chat does not ask for contact details within the conversation: to request a quote it directs you to the quote panel forms, whose data is processed in the same way as the form data described in this section.

6. Who will your data be disclosed to?

The HELPRO and HELPAR forms, the newsletter form and the "Send by email" button of the quote panels are sent through FormSubmit, an external provider acting as a data processor to deliver the message by email to HELPRO. If you write to us on WhatsApp, or choose "Send via WhatsApp" in the quote panels, your message is handled through that application, owned by Meta, in accordance with its own terms and privacy policy. If you book a video call through the video call links on the site, the booking is handled through Google Calendar, so the data you enter on that page (for example, your name and email address to confirm the appointment) is processed by Google in accordance with its own terms and privacy policy. No data is transferred to third parties for commercial purposes and no international transfers are carried out other than those necessary for the provision of these technical services.

Visit statistics and Google Tag Manager. Only if you click "Accept" in the cookie banner, the website loads Cloudflare Web Analytics (a visit-statistics tool without cookies that processes technical browsing data, such as the IP address, in aggregate) and sends to an intermediary server operated for HELPRO and hosted on Cloudflare a visit notice that includes only the page visited and the referring page (or "direct access"), in order to know about visits to the website; no individual profiles are built from this information. In addition, only if you click "Accept", the site loads Google Tag Manager, a Google tag manager: once loaded, Google may receive technical data from your browser, such as the IP address, needed to serve the manager. If you make no choice, or if you click "Reject" or "Essential only", Google Tag Manager is not loaded and no analytics data is sent to Google. Measurement tools activated through Google Tag Manager only receive the analytics storage permission if you click "Accept"; the site never grants permissions for advertising storage, advertising user data or ad personalisation. More information in the Cookie Policy.

AI chat assistant. To generate the replies, the most recent messages of the conversation, together with the chosen language, the page you are on and the service you are viewing, are sent to an intermediary server operated for HELPRO and hosted on Cloudflare (Cloudflare Workers), which generates the reply through Cloudflare Workers AI, using a language model of the Llama family (Meta) that runs on Cloudflare's infrastructure. Cloudflare is a company based in the United States, so this processing may involve an international transfer of data; Cloudflare processes the information in accordance with its own terms and privacy policies. To limit the number of requests per minute, the intermediary server temporarily uses the IP address from which the visitor connects. Email addresses and phone numbers typed in free text are replaced with a placeholder before sending, as described in section 2.

7. What are your rights?

Anyone has the right to obtain confirmation as to whether HELPRO is processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected. You also have the right to request the restriction, portability or objection to the processing of your data, as well as to withdraw the consent given. You can exercise these rights by writing to info@helpro.es, attaching a copy of a document proving your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with current regulations.

8. Training, awareness and educational simulation services

When HELPRO provides a client company with training, awareness or educational simulation services (such as the Human Risk Manager), it may process data about the members of that company's team (for example, name, work email address, job title, questionnaire answers and exercise results) on behalf of that company. In these cases, the client company is the data controller and HELPRO acts as data processor, under a processing agreement that sets out the purpose, duration, security measures and confidentiality.

HELPRO uses this data only to provide the contracted service and does not use it for its own purposes. Results are provided to the company in aggregated form, and no exercise requests or collects passwords or credentials. The data is kept for as long as necessary to provide the service and, once it ends, is deleted or returned to the client company, unless there is a legal obligation to retain it.

It is the client company's responsibility to inform its team members about these exercises. If you are part of the team of a HELPRO client company and wish to exercise your rights, you can contact your company or write to info@helpro.es.